Privacy Policy

The App stores all collected data only in a local database (SQLite) on your Mac. The Developer operates no server, and never views, stores, or collects your data.

Credentials for Google integration (OAuth tokens), and API keys for AI providers and the email delivery service, are encrypted and stored in the macOS Keychain via the safeStorage API.

The Gmail, Calendar, and Drive data itself, and your recorded screen activity, are stored unencrypted in the local database. How this data is protected is explained in detail in §03.

The App collects the following data on your Mac only, and stores it locally.

• Active window's app name and window title (every 5 minutes)
• (Only when screen analysis is enabled) Text extracted from screenshots

If you explicitly connect a Google account, the App retrieves the following information in read-only mode. It never edits, deletes, or sends anything on your behalf.

• Gmail: number of sent/received messages, correspondents (email addresses), subjects, dates (gmail.readonly). Message bodies are never retrieved.
• Google Calendar: number of meetings, attendees (email addresses), titles, start/end times, recurrence, whether a Google Meet link is attached (calendar.readonly)
• Google Drive: file names, file types, action types (create, edit, move, rename, delete, etc.), the name of who performed the action, and timestamps (drive.activity.readonly). File content is never retrieved.

We may collect your email address for the following purposes:

• To register and communicate with you as a free beta participant
• To send progress updates about data collection (1, 3, and 7 days after you start)

Your email address is not used for any purpose other than those above, and is never shared with third parties.

Data retrieved from Gmail, Calendar, and Drive qualifies as sensitive data under Google's definitions. This section describes, concretely and based on the actual implementation, how this data is protected.

Credentials for Google integration (OAuth tokens), and the API keys you enter for AI providers and the email delivery service, are encrypted and stored in the macOS Keychain via the safeStorage API.

The Gmail, Calendar, and Drive data itself (subjects, senders, meeting titles, file names, etc.), and your recorded screen activity, are stored in the local SQLite database without additional application-level encryption. Protection for this data instead relies on the access control described below, and, if enabled, macOS FileVault full-disk encryption.

The App runs only on your own Mac and has no server that receives the data it collects. There is no way for the Developer or any third party to access this data over a network (other than the transmission to your chosen AI provider described in §05).

The local database file (~/Library/Application Support/Mokchee/) is readable only by the macOS user account you are logged in as, under standard macOS file permissions. If the same Mac is shared by multiple user accounts, other accounts cannot access this data through normal permissions.

There is no automatic retention limit or automatic deletion for the Gmail/Calendar/Drive data or the screen activity records collected by the App. Data remains in the local database until you delete it.

From the Dashboard screen, the "Delete All Data" button lets you delete all stored data (activity logs, any Google-connected data, encrypted API keys, settings, and log files) at any time while the App is running. A confirmation screen is shown before deletion, and the action cannot be undone. Once deletion completes, the App quits, and the next launch starts from initial Setup. There is currently no way to selectively delete only specific items.

• If the App cannot be launched normally and in-app deletion isn't possible, you can get the same result manually: in Finder, use Go → Go to Folder to open ~/Library/Application Support/Mokchee/, and delete the entire folder. Simply moving Mokchee.app to the Trash does not delete this data.
• To revoke the App's access to your Google account: visit Google's account permissions page (myaccount.google.com/permissions) and revoke Mokchee's access at any time. After revoking, the App can no longer retrieve new Gmail/Calendar/Drive data. Data already stored locally before revocation is not automatically deleted, so please also delete all data as described above if you want it removed.

Collected data is used solely to analyze work patterns and generate reports, including inefficiency discovery and automation suggestions. We never use it for advertising.

The App generates reports using your own API key (Anthropic Claude or OpenAI ChatGPT) — a "Bring Your Own Key" (BYOK) model.

When generating a report, the following is sent to your chosen AI provider:

• Screen activity: the recorded timeline of app names and window titles (every 5 minutes)
• Gmail: subject, sender/recipient, and date for each sent/received message. Only this metadata is sent — message bodies are never retrieved or sent.
• Calendar: meeting title, start/end time, and attendee count. Individual attendees' email addresses are not sent — only the count is.
• Drive: the list of file names, action types, and timestamps, plus a summary count of operations. File content is never retrieved or sent.
• In addition, aggregated per-app usage time is sent.

• API usage fees are billed directly to you by the AI provider, based on your own contract with them. The Developer does not collect, mark up, or otherwise handle this fee.
• The Developer cannot access the API key you enter. It is encrypted and stored in the Keychain, and used only to communicate with the AI provider.

We never sell or share your data with third parties. Other than the AI provider transmission described in the previous section, your Gmail, Calendar, and Drive data never leaves your Mac.

Separately, progress-update emails (see §02.3) are delivered using the email service Resend. This delivery only shares the recipient's email address and the notification text (e.g. app usage summaries) with Resend — it never includes your Gmail, Calendar, or Drive data.

Connecting Google services such as Calendar is an optional feature. Retrieved data is used only for report generation.

In the version currently distributed, the in-app entry point for Google integration is temporarily disabled while we prepare for Google's required review (CASA). When integration is enabled, you can grant or revoke access at any time from within the app.

The App's use of Google Workspace APIs (Gmail, Calendar, Drive) complies with the Google API Services User Data Policy, including the Limited Use requirements.

This service is primarily intended for users in Japan. If you reside in a region where the EU General Data Protection Regulation (GDPR) applies, the service is not currently intended for your use.

Data sent to AI providers (Anthropic, OpenAI) is processed on their servers, primarily located in the United States.

For questions about this policy, please contact us via Kizna.ai (kizna.ai).

This policy may be revised as features are added or changed. Significant changes will be announced within the App or on this page.